CVE Feed

Dashboard / CVE / CVE-2013-6638

CVE-2013-6638

Multiple buffer overflows in runtime.cc in Google V8 before 3.22.24.7, as used in Google Chrome before 31.0.1650.63, allow remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large typed array, related to the (1) Runtime_TypedArrayInitialize and (2) Runtime_TypedArrayInitializeFromArrayLike functions.

Published:Dec 4, 2013

Last Modified:Apr 11, 2025

EPS:Dec 7, 2013

EPSS Score:0.04074

CVSS Score:7.5

Affected Products

Vendor

Product

Action

Vendor

Google

Product

Chrome

Google

Chrome

Vendor

Google

Product

V8

Google

V8

Exploits

No exploit reference

Common Weakness Enumeration

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-10 Buffer Overflow via Environment Variables

CAPEC-100 Overflow Buffers

CAPEC-123 Buffer Manipulation

CAPEC-14 Client-side Injection-induced Buffer Overflow

CAPEC-24 Filter Failure through Buffer Overflow

CAPEC-42 MIME Conversion

CAPEC-44 Overflow Binary Resource File

CAPEC-45 Buffer Overflow via Symbolic Links

CAPEC-46 Overflow Variables and Tags

CAPEC-47 Buffer Overflow via Parameter Expansion

CAPEC-8 Buffer Overflow in an API Call

CAPEC-9 Buffer Overflow in Local Command-Line Utilities

Related CVEs

CVE-2026-87593 (CVSS 6.5) — Information leak in Editing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensit…

CVE-2026-87430 (CVSS 8.8) — Buffer overflow in WebRTC in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially exe…

CVE-2026-87544 (CVSS 9.8) — Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to byp…

CVE-2026-87601 (CVSS 7.5) — Race condition in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary co…

CVE-2026-87602 (CVSS 4.7) — Out of bounds read in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to…

CVE-2026-87437 (CVSS 6.5) — Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive…

CVE-2026-87608 — Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker lev…

CVE-2026-87551 (CVSS 4.3) — Improper certificate validation in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leve…

CVE-2026-87477 (CVSS 6.5) — Information leak in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak sensitive i…

CVE-2026-87571 (CVSS 5.4) — Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker le…

References

http://code.google.com/p/v8/source/detail?r=17800

http://googlechromereleases.blogspot.com/2013/12/stable-channel-update.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00090.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00096.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00122.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00124.html

http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html

http://lists.opensuse.org/opensuse-updates/2014-01/msg00063.html

http://secunia.com/advisories/56216

http://secunia.com/advisories/56217

http://www.debian.org/security/2013/dsa-2811

http://www.mail-archive.com/v8-dev%40googlegroups.com/msg79646.html

http://www.securitytracker.com/id/1029442

https://code.google.com/p/chromium/issues/detail?id=319722

http://code.google.com/p/v8/source/detail?r=17800

http://googlechromereleases.blogspot.com/2013/12/stable-channel-update.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00090.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00096.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00122.html

http://lists.opensuse.org/opensuse-updates/2013-12/msg00124.html

http://lists.opensuse.org/opensuse-updates/2014-01/msg00042.html

http://lists.opensuse.org/opensuse-updates/2014-01/msg00063.html

http://secunia.com/advisories/56216

http://secunia.com/advisories/56217

http://www.debian.org/security/2013/dsa-2811

http://www.mail-archive.com/v8-dev%40googlegroups.com/msg79646.html

http://www.securitytracker.com/id/1029442

https://code.google.com/p/chromium/issues/detail?id=319722

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High